$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa File: 51f5b9b5-7986-48f5-b8ca-65770c13d249.roa (raw, json) Hash identifier: lidkmrY1PTtuMa0aVwIvLBBPclByvdqSDb/8hpEuct8= Subject key identifier: 20:99:E5:53:2D:6E:50:0D:D6:FE:96:63:14:45:C1:FF:BB:D2:E1:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67EE43E924EB14AAEEB801DDF65C06F1303CB649 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa Signing time: Fri 08 Nov 2024 00:00:00 +0000 ROA not before: Fri 08 Nov 2024 00:00:00 +0000 ROA not after: Fri 13 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ee:43:e9:24:eb:14:aa:ee:b8:01:dd:f6:5c:06:f1:30:3c:b6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 8 00:00:00 2024 GMT Not After : Dec 13 23:59:59 2024 GMT Subject: serialNumber=a055738abd3087c86ee10a6a183f98338e829e2efff53bca9e164347f28a48c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:58:8b:a7:af:12:32:ef:a2:0d:c1:a6:72: a5:5a:ef:1d:f1:0b:ab:d0:11:5e:0a:f6:c0:1b:14: 47:ad:01:b8:b2:df:7b:cc:dd:c4:07:8c:54:35:fa: f3:13:3a:cb:85:4e:10:6e:cd:82:4f:66:03:67:a3: cb:37:dc:50:96:b6:f2:c5:71:84:c7:7d:8a:7b:d2: ec:f8:26:ce:91:f5:fa:97:5a:c1:e9:f6:42:8a:ca: c0:8d:7e:66:39:cd:21:fa:b0:2d:e5:52:f5:47:a0: 2c:4e:b6:f2:97:1c:1a:01:38:c2:e6:3e:84:56:70: 77:6a:e1:d5:86:5c:5c:3a:e6:f7:61:e0:5b:73:d1: 94:e4:cf:0a:e5:a7:9b:e8:54:bc:5c:d8:dd:75:0a: 9a:e2:35:db:9b:b1:12:31:31:bd:45:00:2f:dc:2c: 7d:ef:5b:bc:ad:22:28:d3:28:1b:f7:d4:b2:c4:d1: ca:89:23:66:08:62:a0:15:95:f2:6c:d0:5e:53:ea: 01:ff:3a:bd:23:3c:04:6c:f3:74:4d:c7:4a:fe:8b: 7a:40:22:7f:e2:69:45:c3:c0:50:2a:64:cf:47:91: 60:16:2d:8e:43:68:82:12:00:ab:9e:10:6e:cb:b3: 99:c2:bc:e9:a3:11:b0:70:bb:db:56:2d:7c:09:00: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:E5:53:2D:6E:50:0D:D6:FE:96:63:14:45:C1:FF:BB:D2:E1:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f5b9b5-7986-48f5-b8ca-65770c13d249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:6000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:2a:ae:1b:32:ed:63:a9:0f:b2:aa:12:98:25:11:23:00:49: 94:c3:06:a0:df:36:63:ca:b4:ff:c2:9e:cf:df:38:ef:99:1e: f0:c7:fb:cb:84:5f:c1:d3:bf:fb:e8:bd:98:17:7a:2b:69:7d: 09:bc:b4:4f:38:3c:25:88:b0:c9:93:82:76:35:2e:82:1a:1b: 0d:b9:df:4e:0e:68:75:ae:2c:74:e3:07:1e:0d:46:f6:1a:12: 52:1e:d1:45:6f:f8:a2:53:29:d5:d0:6d:54:12:76:c1:ce:fd: bf:68:99:3c:c9:74:69:9b:36:43:5e:c3:f2:24:49:c2:5b:76: 26:7e:fe:c9:e2:bf:12:74:00:db:44:c1:9c:18:06:9a:62:ac: fa:49:e2:0c:ef:b4:2d:dc:7e:4b:3a:2b:f8:2e:fa:5c:7c:b0: be:7f:e5:fd:8c:b9:ad:7c:5d:4e:f9:dc:7e:6a:c9:78:da:e8: a4:2b:2a:7d:1b:cf:80:5f:9f:37:77:cb:a0:6a:de:ae:94:36: 1e:e2:66:08:d4:f7:51:99:5e:4a:b2:7b:69:31:c6:46:bf:c9: 3b:e5:27:26:f8:54:d7:db:6a:86:ae:b8:a8:02:88:81:a9:6b: f6:cf:7e:09:6e:ff:e4:d1:5c:f5:0f:31:f5:87:b3:bf:aa:a0: a1:e6:fa:3d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZ+5D6STrFKruuAHd9lwG8TA8tkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTA4MDAwMDAwWhcNMjQxMjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDU1NzM4YWJkMzA4N2M4NmVlMTBhNmExODNmOTgzMzhl ODI5ZTJlZmZmNTNiY2E5ZTE2NDM0N2YyOGE0OGMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6aliLp68SMu+iDcGmcqVa7x3xC6vQEV4K9sAbFEetAbiy 33vM3cQHjFQ1+vMTOsuFThBuzYJPZgNno8s33FCWtvLFcYTHfYp70uz4Js6R9fqX WsHp9kKKysCNfmY5zSH6sC3lUvVHoCxOtvKXHBoBOMLmPoRWcHdq4dWGXFw65vdh 4Ftz0ZTkzwrlp5voVLxc2N11CpriNdubsRIxMb1FAC/cLH3vW7ytIijTKBv31LLE 0cqJI2YIYqAVlfJs0F5T6gH/Or0jPARs83RNx0r+i3pAIn/iaUXDwFAqZM9HkWAW LY5DaIISAKueEG7Ls5nCvOmjEbBwu9tWLXwJAOIPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIJnlUy1uUA3W/pZjFEXB/7vS4ZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZjViOWI1LTc5ODYtNDhmNS1iOGNhLTY1NzcwYzEzZDI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oYDANBgkqhkiG9w0BAQsFAAOCAQEAnCquGzLtY6kPsqoSmCURIwBJ lMMGoN82Y8q0/8Kez98475ke8Mf7y4RfwdO/++i9mBd6K2l9Cby0Tzg8JYiwyZOC djUughobDbnfTg5oda4sdOMHHg1G9hoSUh7RRW/4olMp1dBtVBJ2wc79v2iZPMl0 aZs2Q17D8iRJwlt2Jn7+yeK/EnQA20TBnBgGmmKs+kniDO+0Ldx+Szor+C76XHyw vn/l/Yy5rXxdTvncfmrJeNropCsqfRvPgF+fN3fLoGrerpQ2HuJmCNT3UZleSrJ7 aTHGRr/JO+UnJvhU19tqhq64qAKIgalr9s9+CW7/5NFc9Q8x9Yezv6qgoeb6PQ== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:00 2024 by rpki-client on console-fra.rpki-client.org